News for hackers. Stuff that matters.

A comment on Show HN: Subtrace – Wireshark for Docker Containers. Parent comment

Re:Show HN: Subtrace – Wireshark for Docker Containers by smw on Thursday February 20, 2025 @01:25PM (#43118244)
kubeshark [0] is using ebpf to catch calls to openssl/go's tls lib and thus no need to juggle certs. Has pros and cons compared to your method, but an interesting comparison.

[0] https://www.kubeshark.co/

[ Parent | on HN ]
Re:Show HN: Subtrace – Wireshark for Docker Containers by ddelnano on Thursday February 20, 2025 @01:47PM (#43118481)
The approach you describe above is common for similar projects:

- Pixie (https://px.dev) -- which I contribute to

- Beyla (https://github.com/grafana/beyla)

- Coroot (https://github.com/coroot/coroot)

If you are interested in the details and how the strategy for this tracing has evolved, you can learn more in this blog (https://blog.px.dev/ebpf-tls-tracing-past-present-future/).

[ Parent | on HN ]